RSA, the security division of EMC, has added analytics capabilities to its RSA Security Analytics solution, aimed at helping businesses extend protection of their infrastructure into the cloud.
According to RSA, the solution has been designed to give companies the necessary context to help detect and respond to today's advanced attack campaigns before they can damage the business.
In addition, this release was also engineered to enable visibility into attacks that target customer-facing Web and mobile applications, and introduces data privacy capabilities.
"While logs are a valuable piece of the puzzle, they're limited by what the preventative controls they monitor can detect, and alone are not enough to identify advanced attacks. In fact, most successful attacks go undiscovered by logs alone," says RSA.
The security giant explained that even when log-based security incident and event management (SIEM) systems are able to detect the faint signals of an attack, they cannot join the dots to give security analysts a thorough understanding to allow them to quickly respond to and disrupt the attack. "Instead they overwhelm analysts with alerts that lack the context needed to take action."
One of the themes of RSA Conference 2015 has been that a different approach to security is needed. RSA has said the new approach needs to be 'multifaceted and integrated' if it hopes to fully understand an attack, respond quickly in the event of an incident, and ensure that business returns to normal as quickly as possible.
"RSA Security Analytics is designed to aggregate logs, along with data from network packets, endpoints, and now the cloud, and contextually analyses the data to help allow businesses to quickly and fully understand what was targeted, the attacker's strategy and actions within the company, and the magnitude of the attack such that they can respond before a breach of confidential information can occur."
Share